Hi,
I've got a Linux 2.0.33 box running IP Masq on my firewall for the last 2
years.
Recently, I needed to allow access to a web server behind the firewall. So
I did the following :
1. Downloaded and installed kernel source for 2.0.36 (as recommended by the
IP Masq FAQ)
2. Downloaded and installed PPP 2.3.7 source (my firewall needs to connect
to a NT RAS server. PPP 2.2.0 doesn't support MSCHAP80 authentication but
ppp 2.3.0 and above does).
3. Downloaded kernel patch to enable IPPORTFW (subs-patch-1_37.gz) and
applied the patch.
4. Downloaded patch for ip_masq_ftp (portfw-ftp-patch.tgz) and applied it.
I also copied ip_masq_ftp.c from this archive to the right place.
5. Compiled the kernel (make config with the options specified in the FAQ,
make clean, make zImage, make modules, make modules_install). Installed the
kernel (edited /etc/lilo.conf, ran lilo and rebooted the masq PC).
6. Downloaded, compiled and installed ipportfw.
At this stage, I verified that masquerading is still working as per normal.
I then did :
ipportfw -C
ipportfw -A -t 203.120.23.46/80 -R 192.168.0.5/80
ipportfw -L reports
Prot Local Addr/Port > Remote Addr/Port
TCP 203.120.23.200/21 > 192.168.0.2/21
I then fired up my browser and tried to access the web server through the
firewall but it was no go. A quick look through the Masq mail archives
shows a few others having the same problem but I've done what I think needs
to be done to get it to work but I'm still missing something else. Any
pointers would be greatly appreciated.
Regards
S H Chua
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
